Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/6c6d782731d3f7631300fa0983001697a77fe0e3.roa
File:                     6c6d782731d3f7631300fa0983001697a77fe0e3.roa (raw, json)
Hash identifier:          dskjc4s6Vlaaq/w2jU/cmQWBSy73HW2aHjgA6x3UuUg=
Subject key identifier:   09:52:B1:4C:DF:EF:19:82:6F:96:3B:3B:B8:7D:C2:C5:6E:89:D9:F9
Certificate issuer:       /CN=2bc54a732b1e35772dfd48ba0704665447b560ae
Certificate serial:       239F8D
Authority key identifier: 6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bc54a732b1e35772dfd48ba0704665447b560ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/6c6d782731d3f7631300fa0983001697a77fe0e3.roa
Signing time:             Fri 08 Mar 2024 08:30:00 +0000
ROA not before:           Fri 08 Mar 2024 08:30:00 +0000
ROA not after:            Sun 08 Mar 2026 08:30:00 +0000
asID:                     271823
IP address blocks:        190.83.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334605 (0x239f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc54a732b1e35772dfd48ba0704665447b560ae
        Validity
            Not Before: Mar  8 08:30:00 2024 GMT
            Not After : Mar  8 08:30:00 2026 GMT
        Subject: CN=6c6d782731d3f7631300fa0983001697a77fe0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:57:d9:9c:5b:2b:97:c6:64:c8:92:2a:a6:
                    0b:03:ba:7c:6c:f8:c0:52:3f:38:75:46:7d:af:46:
                    20:fb:cb:42:7a:3d:89:5b:21:e4:3f:67:db:56:9f:
                    c8:ee:af:16:7f:35:83:93:c7:09:e0:3f:de:ba:c2:
                    ab:8d:12:d7:25:29:a4:fd:f1:49:65:44:0e:e8:c0:
                    18:55:05:c9:20:0b:a5:73:28:80:e5:55:33:7b:50:
                    01:1e:ec:a4:bc:d6:5f:ac:ac:6c:c1:aa:31:5c:64:
                    b5:8e:9b:a9:b8:7b:66:d8:d8:a0:c8:fb:83:d2:fb:
                    81:62:9e:df:72:87:38:44:a2:f7:13:94:6b:ac:fa:
                    a2:cf:01:00:e6:de:90:49:e5:ca:d1:0f:eb:f2:41:
                    f6:4c:ac:c4:5e:3e:76:aa:9e:f4:a4:28:3f:ae:77:
                    b8:b9:0c:c3:20:98:3f:8d:25:d1:c7:eb:f0:5b:62:
                    31:80:39:04:b2:1a:83:fe:14:29:38:f6:07:0c:5c:
                    99:ee:a7:d9:79:4c:8e:d8:c9:ad:e2:7b:1b:04:91:
                    dc:14:de:db:3a:bc:43:1f:d0:53:f5:ca:f9:95:e0:
                    58:07:9a:d8:69:0d:0c:ee:58:81:3e:cf:33:53:aa:
                    89:5e:e8:37:fb:89:a4:0c:f9:6f:63:64:32:54:6a:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:B1:4C:DF:EF:19:82:6F:96:3B:3B:B8:7D:C2:C5:6E:89:D9:F9
            X509v3 Authority Key Identifier:
                keyid:6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bc54a732b1e35772dfd48ba0704665447b560ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/6c6d782731d3f7631300fa0983001697a77fe0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2bc54a732b1e35772dfd48ba0704665447b560ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:58:04:b6:b9:61:c1:ff:e0:b0:38:32:a9:a9:91:45:93:
         ef:90:0d:75:8c:14:01:9e:40:60:e8:bf:74:70:fa:a6:98:2d:
         19:a2:77:87:d4:b7:c2:b8:ff:29:f0:ff:b7:73:b4:5d:c6:6b:
         68:fb:08:4c:a7:7e:64:7f:f9:45:5c:dc:57:ac:b9:f5:28:b1:
         06:3e:9e:e7:4e:06:f6:d1:e5:87:ed:58:e9:9f:d2:c4:f0:0d:
         d6:d6:2d:5c:7c:5e:f3:b5:ee:19:f3:80:21:a6:da:80:57:45:
         c4:df:ec:c7:b0:b0:fd:cf:b1:a5:8b:b5:07:14:c6:db:4b:6b:
         0e:90:6b:db:d0:ef:e4:3b:08:b9:87:fc:2b:19:29:54:bc:cd:
         6e:e0:28:17:c8:15:02:fa:e3:42:89:6f:2e:cd:d0:da:e0:70:
         11:1b:a0:ee:bc:f1:da:96:64:4c:15:f2:75:ee:f0:5a:6c:14:
         d5:57:cf:92:68:ce:e3:ca:17:59:b5:05:e7:33:a8:66:d4:e3:
         af:5d:6d:5d:32:70:75:bd:7e:63:39:41:3b:dc:3f:47:b2:8b:
         d0:67:e7:22:45:11:21:eb:00:20:99:a2:be:67:2d:81:77:4b:
         ce:d6:c1:03:2d:0e:d4:77:79:25:a3:82:d8:07:69:08:79:e9:
         f5:4b:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org